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Chapter 1 

Field Extensions 



1.1 Basic Facts 

Let us begin with a quick review of the basic facts regarding field extensions and Galois groups. 
For more details, consult the notes [4] or any of the standard texts such as Lang [7] or Jacobson 
[6]. 

Suppose L/K is a field extension (which means that L is a field and if is a subfield of L). We 
call L/K to be finite if as a vector space over if, L is of finite dimension; the degree of L/K, denoted 
by [L : K], is defined to be the vector space dimension of L over K. Given a±, . . . ,a n G L, we 
denote by K{a\, . . . , a n ) (resp: K[a\, . . . , a n ]) the smallest subfield (resp: subring) of L containing 
K and the elements a\,...,a n . If there exist finitely many elements a±, . . . ,a n G L such that 
L = K(ai, . . . , a n ), then L/K is said to be finitely generated. An element a £ L such that 
L = if (a) is called a primitive element, and if such an element exists, then L/K is said to be 
a simple extension. If L'/K is another extension, then a homomorphism a : L — > L' such that 
cr(c) = c for all c € K is called a K -homomorphism of L — > L'. Note that a if -homomorphism is 
always injective and if [L : K] = [V : K], then it is surjective. Thus if L = L' , then such maps are 
called if -automorphisms of L. The set of all if -automorphisms of L is clearly a group where the 
group operation defined by composition of maps. This is called the Galois group of L/K and is 
denoted by Gal(L/if ) or G(L/K). Given any subgroup H of the group of automorphisms of L, we 
can associate a subfield L H of L defined by L H = {a G L : a(a) = a for all a G H}; this is called 
the fixed field of H. 

An element a £ I is said to be algebraic over if if it satisfies a nonzero polynomial with 
coefficients in K. Suppose a G L is algebraic over if. Then a nonzero polynomial of least possible 
degree satisfied by a is clearly irreducible and, moreover, it is unique if we require it to be monic; 
this monic irreducible polynomial will be denoted by Irr(a, K), and called the minimal polynomial 
of a over K. The extension L/K is said to be algebraic if every a G L is algebraic over K. If L/K is 
algebraic, then we call it separable if Irr(a, if) has distinct roots (in some extension of K) for every 
a G L, and we call it normal if Irr(a, if) has all its roots in L for every a G L. It may be noted 
that if L/if is algebraic, then it is normal iff any if -homomorphism of L into some extension L' 
of L maps L onto itself. We call L/K to be a Galois extension if it is finite, separable and normal. 
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To check separability, one generally uses the fact that an irreducible polynomial in K[X] has 
distinct roots iff (= if and only if) its derivative is a nonzero polynomial. This fact follows, in 
turn, from the elementary observation that a root a of a polynomial f(X) £ ^[-X] is a multiple 
root iff /'(a) = 0. The above fact can be used to show that K is perfect (which means either the 
characteristic of K is or the characteristic of K is p ^ and K = K p , i.e., for any x £ K, there 
exists y € K such that x = y p ) iff every algebraic extension of K is separable. On the other hand, 
normality can be checked using the fact a finite extension of K is normal iff it is the "splitting field" 
of some polynomial in i^pX]. Recall that given a nonconstant polynomial f(X) £ ^[-X], we can 
find an extension E of K such that f(X) splits into linear factors in ^[-X], and E is generated over 
K by the roots of f{X) in E. Such an extension is unique up to a K-isomorphism, and is called 
the splitting field of f(X) over K. If deg/(X) = n, then the degree of the splitting field of f(X) 
over K is at most n\. Thus if f(X) is a nonconstant polynomial in i^[XT] having distinct roots, and 
L is its splitting field over K, then L/K is an example of a Galois extension. A i^-automorphism 
of L permutes the roots of f{X), and this permutation uniquely determines the automorphism. 
Thus Gal(L/K) may be thought of as a finite group of permutations. In this case, Gal(L/K) is 
also called the Galois group of the polynomial f(X) or of the equation f(X) = 0. 

Some basic results regarding field extensions are the following. 

1. L/K is finite •<=>• L/K is algebraic and finitely generated. 

2. Given any a G L, we have: 

a is algebraic over K 44> K(a)/K is finite 44> K(a) = K[a]. 

Moreover, if a is algebraic over K and deglrr(a, if) = n, then {l,a, a 2 , . . . , a™ -1 } forms a 
if-basis of K(a). 

3. If oil, ... , a n 6 L are algebraic, then K(cxi, . . . , ct n ) is an algebraic extension of K . Further, 
if a±, . . . ,a n are separable over K, then it is also a separable extension. In particular, the 
elements of L which are algebraic over K form a subfield of L and among these, those which 
are separable form a smaller subfield. 

4. Finiteness, algebraicity and separability are "transitive" properties. That is, if E is a subfield 
of L containing K, then L/K is finite (resp: algebraic, separable) iff both L/E and E/K are 
finite (resp: algebraic, separable). Moreover, if L/K is finite, then [L : K] = [L : E][E : K]. 
In case of normality, all we can say in general is that L/K is normal implies that L/E is 
normal 1 . Thus, a fortiori, the same thing holds for Galois extensions. 

5. (Primitive Element Theorem). If L/K is finite and separable, then it is simple, i.e., there 
exists a £ L such that L = K(a). 

In Number Theory, one has to usually deal with algebraic extensions of Q, the field of rationals, 
or of W p = TL/pTL, the finite field with p elements. Since Q and W p are clearly perfect fields, every 

1 Find examples to show that the other two possible implications are not true. 
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such extension is separable and thus saying that it is Galois amounts to saying that it is finite and 
normal. 

Now we come to the central result in Galois Theory. Suppose L/K is a Galois extension. 
Then Gal(L/K) is a finite group of order [L : K] and its fixed field is K. In fact, we have an 
inclusion-reversing one-to-one correspondence between the subgroups of the Galois group of L/K 
and the intermediate fields between K and L. This correspondence is given as follows. Given an 
intermediate field E (i.e., a subfield of L containing K), the corresponding subgroup of Gal(L/K) 
is Gsl{L/E). And given a subgroup H of G&\(L/K), the corresponding intermediate field is the 
fixed field L H of H. Moreover, given a subfield E of L containing K, the "bottom part" E/K 
is Galois iff Gal(L/E) is a normal subgroup of Gal(L/K), and if this is the case, then G&1(E/K) 
is isomorphic to the factor group Gal(L/K)/Gal(L/E). The above result is usually called the 
Fundamental Theorem of Galois Theory. 

Adjectives applicable to a group are generally inherited by a Galois extension. Thus a Galois 
extension is said to be abelian if its Galois group is abelian, and it is said to be cyclic if its Galois 
group is cyclic. 

Before ending this section, we make some remarks about the important notion of compositum 
(or composite) of fields, which is very useful in Algebraic Number Theory. Let E and F be subfields 
of the field L. The compositum (or the composite) of E and F (in L), denoted by EF, is defined to 
be the smallest subfield of L containing both E and F. The compositum of an arbitrary family of 
subfields of L is defined in a similar fashion; we use an obvious analogue of the above notation in 
case of a finite family of subfields. Now suppose K is a subfield of both E and F, i.e., a subfield of 
the field E n F. We list below some elementary facts concerning compositum of fields, which the 
reader may prove as exercises. 

1. If E/K is finitely generated (resp: finite, algebraic, separable, normal, Galois, abelian), then 
so is EF/F. 

2. If both E/K and F/K are finitely generated (resp: finite, algebraic, separable, normal, Galois, 
abelian), then so is EF/K. 

3. If E/K is Galois, then the map a — ► o\e defines an isomorphism of G&l(EF/F) with the 
subgroup Gdl(E/E n F) of Gsl(E/K). If both E/K and F/K are Galois, then the map 
°~ ~^ (°~\e,o~\f) defines an isomorphism of G&1(EF/K) with the subgroup Gal(E/E n F) x 
Gsl(F/E n F) of Gdl(E/K) x Gel(F/K ). In particular, if E n F = K, then we have natural 
isomorphisms G&\(EF/F) ~ Gal(E/K) and Ga\(EF/K) ~ Ga\(E/K) x Gal(F/K). 

Observe that in view of the above properties, we can define the maximal abelian extension of 
K in L (as the compositum of all abelian extensions of K contained in L). 

Exercise 1.1: Suppose L/K is a Galois extension. Let Hi and H2 be subgroups of Gal(L/K), and 
Ei and E<i be their fixed fields respectively. Show that the fixed field of H\ n H2 is the compositum 
E1E2 whereas the fixed field of the smallest subgroup H of Gal(L/K) containing Hi and H2 (note 
that if either Hi or H2 is normal, then H = H1H2) is E\ n E2. 
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Exercise 1.2: Let L\, . . . , L r be Galois extensions of -ftT with Galois groups G\, . . . , G r respectively. 
Suppose for 1 < i < r we have Lj+i n (L1L2 ■ . .Li) = K. Then show that the Galois group of 
L\Li . . . L r is isomorphic to Gi x G2 x ... x G r . 

Exercise 1.3: Suppose L/if is Galois and Gal(L/K) can be written as a direct product G\ x . . . x 
G r . Let Lj be the fixed field of the subgroup Gi x ... Gj_i x {1} x Gj+i x . . . x G r of G. Show 
that Lj/if is Galois with Gal(Lj/if) ~ Gj, and Lj+i n {L\Li . . . Li) = K, and . . . L r = L. 

1.2 Basic Examples 

In this section, we will discuss some examples of Galois extensions, which are quite important in 
Number Theory and Algebra. 

Example 1: Quadratic Extensions. 

An extension of degree 2 is called a quadratic extension. Let L/K be a quadratic extension. 
Suppose a € L is any element such that a ^ K. Then [-fT(a) : /£] must be > 1 and it must divide 
[L : K] = 2. Therefore L = K(a) and a satisfies an irreducible quadratic, say X 2 + bX + c, with 
coefficients in K. The other root, say f3, of this quadratic must satisfy a + (3 = —b, and hence it 
is also in L. So L/K is normal. Also if chai K 7^ 2, then clearly (3 7^ a and so L/if is separable 
as well. Thus a quadratic extension is always a Galois extension except possibly in characteristic 
two. Now assume that charET 7^ 2. Then G&1(L/K) is a group of order 2, and the nonidentity 
element in it is the automorphism of L which maps a to (3. Using the (Shreedharacharya's) 
formula for roots of quadratic polynomial, we can replace a by yfa so that L = K{y/a), where a 
is some element of K and y/a denotes an element of L whose square is a. With this, we can write 
L = {r + Sy/a : r, s G K} and Gal(L/K) = {id, a}, where id denotes the identity automorphism of 
L and a is the JT-automorphism defined by o(r + Sy/a) = r — S\fa. 

If ivT = Q and L is a subfield of C such that [L : Q] = 2, then it is called a quadratic field. In 
general, a subfield of C which is of finite degree over Q is known as an algebraic number field or 
simply, a number field. In view of the above discussion, we easily see that if L is a quadratic field, 
then there exists a unique squarefree integer m, with m/0,1, such that L = Q(- v /m). We say that 
L is a real quadratic field or imaginary quadratic field according as m > or m < 0. 

Exercise 1.4: Suppose L/K is a biquadratic extension, i.e., L = K(a,[3) where a, f3 are elements 
of L which are not in K but whose squares are distinct elements of K. Assume that charK / 2. 
Show that L/K is a Galois extension and compute its Galois group. 

Example 2: Cyclotomic Extensions. 

Let A; be a field and n be a positive integer. An element uj £ k such that to n = 1 is called 
an n th root of unity (in k). Let /U ra = /J, n (k) denote the set of all n th roots of unity in k. Then 
Hn is a finite subgroup of the multiplicative group k* of nonzero elements of k, and therefore 
it is cyclic. Any generator of \i n is called a 'primitive n th root of unity in k. For example, if 
k = (D, then C = Cn = e 2m ^ n is a primitive n th root of unity, and /Lt n (C) consists of the n elements 
1, C) C 2 ) • • • ) C™ _1 j among these the elements £ J where (j, n) = 1, are precisely the primitive n th roots 
of unity (verify!). The subfield Q(C) of € generated by ( over Q is called the n th cyclotomic field, 
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and the extension Q(C)/Q is called a cyclotomic extension. Since the polynomial X n — 1 splits into 
distinct linear factors in Q(£)[X] as 

n-1 

x n -i=\{{x-e) 

i=0 

we see that Q(C)/Q is a Galois extension whose degree is at most n. Suppose G = Gal(Q(£)/Q) 
and a G G. Then a(Q must also be a root of X n — 1, and therefore a{Q = (i for some integer 
j = j(o~). It is clear that a uniquely determines j(o~) modulo n. Hence the map a — ► j'(cr) is 
injective. Moreover, if cr,r € G, then we have j(cr) = 3(0) j(r) (mod n). Because G is a group, 
we see that j(CT)( mo cl n) is a unit in TL/nTL, and cr — ► j(cr) defines an injective homomorphism of 
G into (7Z/n7L) x , the multiplicative group of units 2 in TLjnTL. It follows that G is abelian and its 
order is at most ip(n), where (p is the Euler totient function defined by 

<p(ri) = the number of positive integers < n and relatively prime to n. 

We will now show that the order of G, i.e., [Q(C) '■ Q], is exactly equal to <£>(n), which will imply that 
the Galois group of Q(C)/Q is naturally isomorphic to (7L/n7L) x . For this, we need the following 
elementary fact which will be proved later. 

FACT: If a monic polynomial with integer coefficients factors as f(X)g(X), where f(X) and g(X) 
are monic polynomials with rational coefficients, then the coefficients of f(X) and g(X) must be 
integers. 

To prove the earlier assertion, let $ n (X) denote the minimal polynomial of £ = Q n over Q. Then 
it must divide X n — 1 in Q[X]. Hence by the FACT above, <& n (X) must have integer coefficients 
and X n — 1 = & n (X)g(X), for some monic polynomial g(X) £ 7L\X\. Now let p be a prime 
number which doesn't divide n, and let a be a root of $> n (X). We claim that oP must also be a 
root of $ n (X). To prove the claim, assume the contrary. Then oP is a root of g{X) and hence 
a is a root of g(XP). Thus g(X*) = & n (X)h(X) for some h{X) G 7L[X] (using the FACT once 
again!). Now reduce (mod p), i.e., consider the polynomials g(X), h(X), etc obtained by reducing 
the coefficients of g(X),h(X), etc., (mod p). Then (by Fermat's little theorem!), we find that 
(g(X)) p = g(X p ) = ® n (X)h(X). This implies that g(X) and ® n (X) have a common root, and 
therefore the polynomial X n — 1 in TLjpTL\X\ has a multiple root. But the latter is impossible since 
the derivative of X n — I is which has zero as its only root since n is not divisible by p. 

This proves our claim, and, as a consequence, it follows that is a root of $ n (X) for all integers 
j such that (j,n) = 1. Hence we find that \G\ = [Q(() : Q] = deg$ n (A) is > <p{n). This together 
with the previous argument proves the equality. We also find that 

Irr(CQ) = <&„(*)= IT ( X ~C 3 )- 

0<j<n-l 

U,n)=l 

2 The structure of this group is well-known from Elementary Number Theory. To begin with, if n = p^ 1 . . .p e g a 
is the factorization of n as a product of powers of distinct primes, then by Chinese Remainder Theorem, we have 
{7L/n7L) x ~ (2Z/pj 1 ZZ) x x . . . x (K/pg 3 2Z) x . If p is a prime and e a positive integer, then CZ/p el Z) x is cyclic if p 
is odd or p = 2 and e < 2. If e > 2, then (2Z/2 e 7Z) x is the direct product of K/2K and 2Z/2 e ~ 2 7Z. In particular, 
(7L/n7L) x is cyclic, i.e., primitive roots (mod n) exist iff n = 2, 4, p e or 2p e where p is an odd prime. See, for example, 
[1] or [5] for details. 
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The above polynomial is called the n cyclotomic polynomial. As noted above, it has integer 
coefficients and its degree is <p(n). Collating the terms suitably in the product representation of 
X n — 1, we readily see that 

x n -i=n* d (x) 

d\n 

and so, in particular n = J2d\n The above formula, in fact, gives an efficient way to compute 

& n (X) in a recursive manner. 

Let m and n be relatively prime positive integers. We know from Elementary Number Theory, 
that ip is a multiplicative function, and thus <p(mn) = (p(m)(p(n). This implies that [Q(Cmn) : Q] = 
[Q(Cm) : Q][Q(Cn) : Q]- Moreover, we clearly have that Cmn ls a primitive n th root of unity, Cmn 
is a primitive m th root of unity, and CmCn is a primitive mn th root of unity. Therefore Q(Cmn) 
must equal the compositum Q(Cm)Q(Cn)- This together with the previous equality shows that 
Q(Cm) n Q(Cn) = Q. 

Exercise 1.5: If p is a prime number, then show that 

VP _ 1 

$ p (X) = —— = X p - 1 + X p - 2 + ... + X + 1 

and for any e > 1, <Ey(X) = Q p (X p ). Use this and the Eisenstein Criterion for <3? p e(X + 1) to 
show directly that $ p e(A) is irreducible in Q[X]. 

Exercise 1.6: [This exercise assumes some familiarity with Elementary Number Theory. 3 ] Let p 
be an odd prime, and ( be a primitive p th root of unity. Consider the Gauss sum g = J2t=i (f ) C- 

Show that g 2 = {—l)^ p ~ l ^ 2 p. Deduce that the quadratic extension Q(y^p) is contained in p th or 
(2p) th cyclotomic extension. Conclude that any quadratic extension is contained in some cyclotomic 
extension. 

Example 3: Finite fields 

Let F be a finite field. Its characteristic must be a prime number, say p. Thus we may assume 
that it contains W p = TLjpTL as a subfield. The extension F/W p has to be finite and if its degree 
is m, then, evidently, F contains precisely q = p m elements. Now since F* = F \ {0} is a group 
of order q — 1, each of the q elements of F satisfies the polynomial X q — X. Thus F is a splitting 
field of X q — X over W p . It follows that for any prime power q, there is, up to isomorphism, a 
unique field of order q. Explicitly, it is the splitting field of X q — X over TLjpTL. For this reason, 
one uses the notation W q to denote a field of order q. Now suppose L is a finite extension of F 
of degree n. Then L is a finite field and \L\ = q n . Also, L is a splitting field over W p (and hence 
over F) of the polynomial X q — X which has distinct roots (since its derivative is —1, which is 
never zero). It follows that L/F is a Galois extension. The map a : L — > L defined by a (a) = a q 
is an F-automorphism of L (Verify!). Its powers id, a, a 2 , ... , a™" 1 are distinct because otherwise 
o % = id for some i with < i < n and thus every x G L satisfies x q% = x, which is a contradiction 

3 All you need to know really is that if p is prime and a is an integer not divisible by p, then the Legendre symbol 
(^) is, by definition, equal to 1 if a = a; 2 (mod p) for some integer x, and is equal to —1 otherwise. It is multiplicative, 

i.e., ( f) = (a) (|), and Euler's Criterion, viz., (|) = a (p - 1)/2 (mod p) holds for any odd prime p. 
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since \L\ = q n > q l . Moreover, a n = id. Since Gal(L/F) must have order n = [L : F], it follows 
that the Galois group of L/F is the cyclic group of order n generated by a. The map a which is a 
canonical generator of the Galois group of L/F is called the Frobenius automorphism. 

1.3 Cyclic Extensions 

In this section, we shall see that if K is a reasonably big field, then cyclic extensions of K have a 
very neat structure. This will be done using a famous result of Hilbert, known as Hilbert Theorem 
90, which characterizes elements in cyclic extensions of norm 1 or of trace 0. This result of Hilbert 
or more precisely, a cohomological version of it, is of prime importance in Class Field Theory. 

To begin with, let us recall the notions of norm and trace. Suppose L/K is a finite extension 
of degree n. Given any a G L, we define its trace w.r.t. L/K, denoted by Ti L / K {a), to be 
the trace of the iT-linear transformation x ax of L — ► L. The determinant of this linear 
transformation is called the norm of a w.r.t L/K and is denoted by N L / K (a). Equivalently, if 
$(X) = X n + aiX 71 ^ 1 + . . . + a n is the characteristic polynomial of the above linear transformation 
(which is called the field polynomial of a w.r.t. L/K), then Tr(a) = —a\ and N(a) = (—l) n a n . As 
done here, the subscript L/K is usually dropped if it is clear from the context. 

Basic properties of norm and trace are as follows. 

1. Tr L / K is a K-linear map of L — ► K. For a G K, Tr(a) = na. 

2. N L/K is a multiplicative map of L ->■ K (i.e., N{a0) = N(a)N(/3) for a, (3 G L). For a G K, 
N(a) = a n . 

3. If L/K is a Galois extension, then trace is the sum of the conjugates whereas the norm is the 
product of the conjugates. More precisely, for any a G L, we have 

Tr L /i^(a) = °"( a ) and n l/k(o) = \[ <j{a). 

aeGa\(L/K) ueG&\{L/K) 

4. Norm and trace are transitive. That is, if E is a subfield of L containing K, then for any 
a G L, we have 

Ty l/k (o) = Tr E/K (Tr L/E (a)) and N L/K (a) = N E/K (N L/E (a)). 

In fact, Property 3 above holds in a more general context. Indeed, if L/K is separable and N 
is some (fixed) normal extension of K containing L, then every a G L has exactly n = [L : K] 
conjugates (w.r.t. L/K) in TV" [these are, by definition, the elements a(a) as a varies over all K— 
homomorphisms of L — ► N]. In the case L = K(a), these n conjugates are distinct and they are 
precisely the roots (in N) of the minimal polynomial Irr(a, K) of a over K. In any case, if L/K is 
separable and a^, a^ 2 \ . . . , denote the conjugates of a w.r.t. L/K, then we have 

Tr L/K (a) = q (1) + q (2) + . . . + a {n) and N L/K (a) = a (1) a (2) . . . a (n) . 



8 



It may also be noted that in the above set-up, the field polynomial of a w.r.t. L/K is given by 
and moreover, it equals lrr(a, K)^ L:K( - a ^ . For a more detailed discussion of the 
notions of norm and trace and proofs of the above results, the reader may consult [4], [12], or [14]. 

Remark: It should be noted that the definitions of trace and norm make sense even when L is a 
ring containing the field K as a subring such that L is of finite dimension n as a vector space over 
K. In this generality, the properties 1 and 2 above continue to hold. We shall have an occasion to 
use trace in this general context in some later sections. 

Now suppose L/K is a Galois extension. For any a G K and any a G G&l(L/K), the elements a 
and a(a) clearly have the same norm as well as the same trace. In other words, N L / K {a/a(a)) = 1 
and Tr L / K (a — a(a)) = 0. The result of Hilbert we talked about, which was ninetieth in the 
sequence of 169 theorems in his "Zahlbericht" , says that the converse is true if L/K happens to be 
a cyclic extension. More precisely, we have the following. 

Hilbert Theorem 90. Let L/K be a cyclic extension of degree n and a be a generator of 
G&1(L/K). Then for any (3 G L, we have: 

(i) N(P) = 1 iff (3 = a/a(a) for some a G L. 

(ii) Tr((3) = iff = a - a{a) for some a G L. 

To prove this result, we will use the following lemma due to Artin, which is a sleek reformulation 
of a classical result of Dedekind. 

Lemma. Let a\ , . . . , a n be distinct homomorphisms of a group G into the multiplicative group k* 
of a held k. Then they are linearly independent over k. 

Proof: Induct on n. The case of n = 1 is obvious. Suppose n > 1 and a\G\+. . .+a n a n = for some 
ai,...,a n G k. We may assume that m ^ for all i because otherwise the induction hypothesis 
applies. Now since a\ / 02, there is some a G G such that a±(a) 7^ (12(a). From the above 
equation, we see that for any x G G, we have a\G\(x) + . . . + a n a n (x) = 0. Multiplying throughout 
by a\{a) we get a\ai(a)ai{x) + . . . + a n ai(a)a n (x) = while replacing x by ax and using the fact 
that (Ti are homomorphisms, we get a±ai(a)ai(x) + . . . + a n cr n (a)a n (x) = 0. Subtracting the first 
equation from the last, we find that 620"2(x) + . . . + b n a n (x) = 0, where hi = a,i{ai(a) — 01 (a)) and 
62 / 0. But this contradicts the induction hypothesis. □ 
Remark: In the above result, G could have been any monoid which isn't necessarily a group. 
Homomorphisms of G — > k* are usually called the characters of G in k. 

Proof of Hilbert Theorem 90. The "if" part is easy and its proof has already been indicated. 
Suppose (3 G L is such that N((3) = 1. Let us put 

a = 1, ai = 0, a 2 = P<r(P), a n _i = (3a((3) . . . cr n ~ 2 {0). 

Then these are nonzero elements of L such that (3a{ai) = a^+i for < % < n — 1 and (3a{a n -\) = 
N{[3) = 1 = ao- Consider the homomorphisms id, a, a 2 , . . . ,a n ~ 1 . These are clearly distinct maps 
of L* — > L*. Therefore, by the lemma above, there exists some x G L* such that qqx + a\a(x) + 
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a2<r 2 (x) + . . . + a n _i<r n_1 (x) 7^ 0. If we let a denote this nonzero element, then we readily see that 
(3a(a) = a. Thus (3 = a/a(a). 

To prove the additive version of Hilbert Theorem 90, let us again consider only the nontrivial 
part. Thus let (3 G L be such that Tr(/3) = 0. This time, let us put 

b = 0, h = (3, b 2 = (3 + <t(P), = (3 + a{(3) + ... + a n ~ 2 (f3). 

Then we have (3 + a(bi) = b i+1 for < i < n - 1 and (3 + a(b n -i) = Tr(/3) = = b . Using the 
Lemma above, we can find some x G L* such that Tr(x) = x + cr(x) + . . . + cr n_1 (x) / 0. Now 
if we take a = tjj^j \b\a(x) + bi^ix) + . . . + b n ^ia n ~ 1 (x)] , then we see that (3 + a(a) = a. This 
completes the proof. □ 

Exercise 1.7: Let d be a squarefree positive integer. Show that a pair (x, y) of integers is a solution 
of the Pell's equation X 2 — dY 2 = 1 iff x + y\fd = a+ ^^| for some integers a and b. 

Now let K be a field and n be a positive integer. Assume that the characteristic of K is 
either zero or relatively prime to n. Also assume that K contains all the n th root of unity. Thus 
(K) is a cyclic group of order n. 

Consider the polynomial X n — a in /£"[-X], where a is some nonzero element of K. Suppose a 
is a root of this polynomial, then all other roots are of the form coa, where to G [i n . Thus K(a) 
contains all the roots of X n — a. Moreover, these roots are distinct since is the only root of the 
derivative nX n ' x of X n - a. Therefore K(a)/K is a Galois extension. Let G denote the Galois 
group of K(a)/K. Any a £ G must map a to wa for a uniquely determined uj = u a £ fx n . The 
map a — > uj g = a (a) /a is clearly seen to be an injective homomorphism of G — > ji n . Therefore G is 
a cyclic group of order d, where d is a divisor of n. If a is a generator of G, then a(a) = wa, where 
oo G /J. n must be a primitive (I th root of unity in K. Consequently, a(a d ) = (uja) d = a d , and thus 
a d G -fT. It follows that the minimal polynomial of a over K is X d — a d . In particular, if X n — a 
is irreducible, then its Galois group is the cyclic group of order n. 

To summarise the above discussion, we may say that if X n — 1 can be solved in K, then any 
equation of the form X n — a, has a cyclic Galois group. We show below that the converse is also 
true. 

Theorem. Let K he as above and let L/K he a cyclic extension of degree n. Then there exists 
a G K such that L = K(a) and Irr(a, K) = X n — a for some a G K. 

Proof: Let Q be a primitive n th root of unity in K. Then N^^ 1 ) = (C _1 ) n = 1- Hence by Hilbert 
Theorem 90, there exists a G L such that C 1 = oc/cr(a), or equivalently, ( = a (a) /a, where a 
denotes a generator of G&l(L/K). It follows that a 1 (a) = C*a, and thus ( %a are conjugates of a for 
< i < n - 1, which are clearly distinct. Therefore, [K(a) : K] > n = [L : K] > [K{a) : K]. It 
follows that L = K(a), and Irr(a, K) = U?=q{X - Qa) = {X n - a n ). This proves the theorem. □ 

Remark: In case n = p = char K , we have an analogous result with X p replaced by X p — X. Thus 
the Galois group of X p — X — a is cyclic and this is the prototype of a cyclic extension of degree p. 
This result is known as Artin-Schreier Theorem. Its proof uses the the additive version of Hilbert 
Theorem 90. For cyclic extensions of degree p m over a field of characteristic p, one has similar but 
more complicated result using the notion of Witt vectors. See [7] for details. 
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1.4 Abelian Extensions 



Let us suppose n is a positive integer and K is a field whose characteristic is zero or relatively 
prime to n. Assume that it contains all the n th roots of unity. We have seen that an equation 
of the form X n — a has cyclic Galois group. Now suppose we consider several such equations, 
say X n — ai, X n — a>2, ■ ■ ., X n — a r , and ask for the Galois group of their product. That means, 
given 01,02, ... ,a r G K, we can consider the field L obtained by adjoining to K the n th roots of 
01,02, . . . ,a r ; it is clearly a Galois extension of K (is it clear to you?), and we ask how does the 
Galois group Gdl(L/K) look like? Let us note that L not only contains the n th roots of Oi, . . . ,a r 
but also of any powers of them or of finite products of such powers and of course of the n th power 
of each element of K. Indeed L consists of the n th roots of any element of the subgroup, say A, of 
the multiplicative group K* which is generated by K* n and the elements 01, . . . ,a r . Thus we may 
write L = if (A 1 /™). To come back to the question about the Galois group of L/K, we see right 
away from the example of biquadratic extensions (Exercise 1.1) that it can't be a cyclic group. But 
it seems natural to expect it to be a direct product of cyclic groups. This is indeed the case. And 
to see that is quite easy. As in the previous section, we have a natural homomorphism of the Galois 
group into the r-fold direct product /j, n x /x„ x . . . x fj, n , which is injective. Thus at any rate, the 
said Galois group is abelian. Now we know that any finite abelian group is the direct product of 
cyclic groups. So it seems reasonable that any finite abelian group is the Galois group of equations 
of the type above. This we shall now prove. 

A Galois extension L/K is said to be of exponent n if a n = 1, for all a G G&\(L/K). By a 
Kummer extension of K we mean a field extension L of K of the form L = K(A 1 / n ), where A is a 
subgroup of K* containing the group K* n of n th powers such that A/K* n is finitely generated (or 
equivalently, finite!). As outlined above, a Kummer extension is an abelian extension of exponent 
n. Conversely, we have the following. 

Theorem. If L/K is an abelian extension of exponent n, then L = K{A 1 ^ n ), where A = L* n f~)K* . 

Proof: Let A = L* n n K* . Clearly, K{A 1 ' n ) C L. Let G = Gal(L/K). Since G is a finite abelian 
group, we can write G = G\ x G2 x . . . x G r , where G\, . . . , G r are cyclic groups. Moreover, since 
o n = 1 for all <7 G G, the order of Gi must divide n, for each i. Let Lj be the fixed field of 
G± x . . . x Gi-i x {1} x Gj+i x ... x G r . Then from Exercise 1.3, we know that Li/K is Galois with 
Galois group Gi. Now using the result about cyclic extensions proved in the last section, we see 
that Li = K(cti), where aj is a nonzero element of Lj such that af £ K. Clearly Lj C ^(A 1 /™). 
Since L is the compositum of Li, . . . , L r , it follows that L C K (A 1 /"). □ 

Thus we see that abelian extensions of K of exponent n are precisely the Kummer extensions 
obtained by adjoining n th roots of elements of a subgroup A of K* such that K* n C A and A/K* n 
is finite. As we shall see in a moment, this correspondence between subgroups A of the type above 
and Kummer extensions K(A 1 / n )/K of exponent n is actually one-to-one and inclusion preserving. 
Moreover, the degree of the Kummer extension K(A l / n ) / K is precisely the index of K* n in A. To 
state this in a "natural" fashion we need the notion of dual group, which is briefly reviewed below. 

Let G be an abelian group of exponent n. By a dual group of G we mean the group G* = 
Hom(G, C n ) of all group homomorphisms of G into a cyclic group C n of order n. In these notes, 
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G will usually be the Galois group of an abelian extension of K of exponent n and we take C n to 
be the group u, n = n n (K) of n th roots of unity in K. The construction of dual groups preserves 
direct products and has the property that if G is a finite abelian group, then G* is isomorphic to 
G [this is usually proved by reducing to the case of cyclic groups via the Structure Theorem for 
finite abelian groups; try!]. For more on dual groups, see Chapter 1, §11 of [7]. 

Theorem. With K and n as above and u. n denoting the group of n th roots of unity in K, we have 
the following. 

(i) Given any subgroup A of K* such that K* n C A and A/K* n is finite, we have a canonical 
isomorphism of the dual group G* = rlom(G,fi n ) of G = Ga\(K(A l / n ) / K) with the factor 
group A/K* n . It is given by a i— ► Xa, where for a £ A, Xa( cr ) = cr(a)/a, where a is an 
element of K(A 1 / n ) such that a n = a. In particular, we have [K(A l l n ) : K] = \A/K* n \. 

(ii) The map A ^ K(A 1 / n ) sets up an inclusion preserving bijection from the set of subgroups A 
of K* such that K* n C A and A/K* n is finite onto the set of Kummer extensions K(A 1 / n ) /K 
of exponent n. 

Proof: Let A be as in (i), L = K{A l / n ) and G = Gal(L/K). In view of the previous result, we see 
that A = L* n n K*. To prove (i), first let us note that the map a i— > Xa is well-defined. Fix a € A 
and a 6 G. Now if a is such that a n = a, then we must have a{a) = (a for some £ £ fi n and thus 
a(a)/a is in fi n ; moreover, £ = a(a)/a is independent of the choice of a. Also if a = 6(mod K* n ), 
then we clearly have Xa{&) = Xb( a )- Thus this map is defined on the factor group A/K* n . Next, 
with a as above, we have 

Xa = 1 cr(a) = a for all a G G <^=^ a £ K* <^=^ a £ K* n . 

This shows that the map a i— ► Xa of A/K* n — > G* is injective. To prove its surjectivity, let x be 
any element of G*. As before, we can write G = G1G2 • • • G r ~ G\ x ... x G r , where G\, . . . ,G r 
are cyclic subgroups of G and the order of each of them divides n. If Li is the fixed field of 
G\ . . . Gi-iGi+i . . . G r , then we know that Li/K is a cyclic extension with Galois group G{. Let cr, 
be the generator of G{. If the order of Gi is di, then, x( CJ «) is a primitive d{ th root of unity in K, 
and so its norm (w.r.t. Li/K) is 1. Therefore, by Hilbert Theorem 90, there exists ccj G Lj such 
that x(°"i) = <Ti(ai)/ai. It is clear that a" G K* . Let a = ai«2 ■■■Ct r and a = a n . Then a £ L 
and a 6 K* n -L* n = A. We claim that % = Xa- To see this, let a be any element of G. Then we 
can uniquely write a = a J 2 2 . . . o 3 r r for some nonnegative integers j\ , ji , . . . , j r . We clearly have 

, . . . . ,- . cr^ioii) <r^ 2 (a 2 ) (7'i r {oi r ) a (a) 

Ct\ Oi2 ol t a 

where the last equality uses the fact that Lj is the fixed field of G\ . . . Gj_iGj+i . . . G r . Thus we 
have proved the surjectivity and the isomorphism between G* and A/K* n is established. 

To prove (ii), let us first note that by previous theorem, the map A ^ K(A 1 / n ) is surjective. 
The remaining assertions will follow if we show that for any subgroups Ai and A2 of K* containing 
K* n and such that the index of K* n in Aj is finite, we have: 

A 1 C A 2 <=> K{A{ /n ) C K(Al /n ). 
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The implication "=>" is of course obvious. Suppose we have K(A^ n ) C K(A^ n ). Let b G Ai. 
Consider the group A3 generated by A2 and b. Since i^O 1 /™) C K(Al /n ), it follows that K(A\ ,n ) = 
K(A\ /n ). By (i) above, \A 2 /K* n \ = \A 3 /K* n \. Also since A 2 C A 3 , this implies that A 2 = A 3 . 
Thus b G A2. So we have proved that Ai C A 2 . This completes the proof. □ 

Remark: The results in this section are collectively referred to as Kummer Theory (of abelian 
extensions). Analogues of the above result also hold in the case of infinite extensions where we drop 
the assumption that A/K* n is finite. For the case of infinite extensions, see [9]. In case of abelian 
extensions of exponent p of a field of characteristic p, we have results similar to Artin-Schreier 
Theorem. As before, see [7] for this. 

1.5 Discriminant 

Let K be field and L be a ring which contains K as a subfield and which has finite dimension n as a 
vector space over K. [In most of the applications, L will be a field extension of K of degree n.\ Let 
us note that, as remarked earlier, the notions of trace and norm of elements of L w.r.t K make sense 
in this general set-up. Given any n elements a±, . . . , a n G L, the discriminant Dj_,IKip L \t ■ ■ ■ > a n) 
of a\, . . . ,a n w.r.t. L/K is defined to be the determinant of the n x n matrix ^Tr^/x( a i a i)) [ 
1 < i,j < n]. Note that D L / K (ai, . . . , a n ) is an element of K. 

Lemma. If a±, . . . ,a n G L are such that D L / K (ai, . . . , a n ) 7^ 0, then {a±, . . . , a n } is a K-basis of 
L. 

Proof: It suffices to show that ai, . . . , a n are linearly independent over K. Suppose Y^i=i c % a i = 
for some c\,...,c n G K. Multiplying the equation by ctj and taking the trace, we find that 
Yh=i CiTr(oiiaj) = 0. By hypothesis, the matrix (Tt L / K (aiO>j)^J is nonsingular. Hence it follows 
that Cj = for j = 1, . . . , n. □ 

Lemma. If {a±, . . . , a n } and {/3\, . . . , j3 n } are two K -bases of L and ai = J2]=i a ijPj> a ij G K, 
then we have 

D L/K (a 1 ,...,a n ) = [det(aij)] 2 D L / K ((3i,...,/3 n ). 
In particular, since (aij) is nonsingular, D L / K {a\, . . . , a n ) = iff D L / K ((3±, . . . , (3 n ) = 0. 
Proof: For any i,j G {1, . . . , n}, we have 

(n \ n / n \ n n 

k=l ) k=l \l=l J fc=l 1=1 

Taking trace of both sides, and letting A denote the matrix (aij), we see that 

(Tr(o^)) = A* (TV(A&)) A 
and so the result follows. □ 
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Remarks: 1. We shall say that the discriminant of L/K is zero (or nonzero) and write D^/^ = 
(or D L / K / 0) if for some ET-basis {a±, . . . , a n } of L, D L / K (a±, . . . , a n ) is zero (or nonzero). The 
last lemma justifies this terminology. 

2. Observe that Tr L / K (xy) is clearly a symmetric i^-bilinear form [which means that the map 
(x,y) i— > Ti L / K (xy) of L x L — > K is a symmetric i^-bilinear map]. The condition that D L / K / 
is equivalent to saying that this form is non-degenerate. Prom Linear Algebra, one knows that if 
the non-degeneracy condition is satisfied, then for any ET-basis {ai, . . . ,a n } of L, we can find a 
"dual basis" . . . , (3 n } of L over K such that Tr L / K (ai(3j) = 8ij, where Sij is the usual Kronecker 
delta which is 1 if i = j and otherwise. 

We now prove an important result which is very useful in explicit computations of the discrim- 
inant. Here, and henceforth in this section, we shall require L to be a field. 

Theorem. If L/K is a finite separable field extension, then its discriminant is nonzero. In fact, if 
a is a primitive element (so that L = K(a) and {1, a, a 2 , . . . , a™ -1 } is a K-basis of L) and f(X) 
is its minimal polynomial, then we have 

D L/Ar (l,a,a 2 ,...,a"- 1 ) = J[ (cP - a®)* = (-l)-(- 1 )/ 2 N L/K (f'(a)) 

i>j 

where a^\a^ , . . . , a^> denote the conjugates of a w.r.t. L/K and /'(a) denotes the derivative 
of f(X) evaluated at a. 

Proof: Since L/K is separable, the trace of any element of L equals the sum of its conjugates 
w.r.t. L/K (in some fixed normal extension N of K containing L). Thus if {u\, . . . ,u n } is a 
K-basis of L and ui~ l \ u^ 2 \ . . . , denote the conjugates of Uj w.r.t. L/K, then we have 
Tr(ujUj) = J2k=i uf^u^\ In other words, the matrix (Tr(njUj)) equals the product of the matrix 



{uf^ with its transpose. Therefore 



D l /k(ui,-- 


-,U n ) = 




(2) 

u\ 

(2) 


[n) 
[n) 








(2) 


(n) 



In case u±, U2, ■ ■ ■ , u n are 1, a, ... , a^ n ^ respectively, then the determinant above is a Vandermonde 
determinant and the RHS becomes 



1 



1 



(a"- 1 )^) (a™" 1 ) 



n(2) 



Moreover, we clearly have 

n 

f(X) = l[(X-a^), 
i=i 



1 



(a"- 1 ) 



n( 

i>j 



a 



coy 



( _i r (n-l)/2-Q^ 



a 



(0 



(j) 



i=i 



a 



00 



and iV L/ x(/ , (a)) = n/ / (« W ) 
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Therefore, we obtain the desired formulae. Our first assertion follows from the fact that if L = K(a) 
is separable over K, then the conjugates a^\a^ 2 \ . . . , of a w.r.t L/K are distinct. □ 

Corollary. If L/K is a finite separable extension, then the symmetric bilinear form Tr L / K (xy) is 
nondegenerate. □ 

Remark: The converse of the above Theorem, viz., if D L / K / then L/K is separable, is also 
true. For a proof, see [14]. 

Remark: Classically, the discriminant of a polynomial, say g(X) = a^X" 1 + a\X m ~ l + . . . + a m , 
is defined to be the "resultant" Hes(g(X), g'(X)) of the polynomial and its derivative. In turn, 
the resultant Res(0, ■0) of two polynomials, say 4>(X) = b$X r + biX r ~ 1 + . . . + b r and ip(X) = 
cqX s + ciX^ 1 + . . . + c s is defined to be the determinant of the (r + s) x (r + s) matrix whose 
(i, j)-th entry, for 1 < j < r + s, is if 1 < i < r and is Cj +r __j if r + 1 < i < r + s. Here, we have 
used the convention that bi = if either i < or i > r and Cj = if either j < or j > s. The 
resultant of two polynomials in one variable X is actually the result of elimination of X between 
them. One shows that if (f){X) = bo Yli =1 (X — «i) and 4>(X) = cq ]Jj =1 (X — (3j), then 

Res(0,vo =6gnv-(«i) = (-ircsnw) =&o<$n ![(«<-&)■ 

It follows that Res(0, ip) = iff either bo = = cq or (j) and ^ have a common root. In particular, 
for a polynomial as above, assuming ao / 0, we have that g{X) has a multiple root iff 

its (classical) discriminant Discxg(^) is zero. Now the above formulae readily imply that in the 
situation of the previous Theorem, we have Discx/(^0 = ( — l) n( ' ra ~ 1 ^ 2 ^_ft"(a)/A"(l) a i ■ ■ ■ > an ~ 1 )-, 
and thus we see that the classical and the modern notions of discriminant are essentially the same. 
For more on resultant et al, see [12]. 

Now let us review a few basic facts concerning integral extensions in order to prove an important 
consequence of the above Corollary. 

Let B be a ring 4 and A be a subring of B. An element x G B is said to be integral over A if it 
satisfies a monic polynomial with coefficients in A. If every element of B is integral over A, then 
we say that B is an integral extension of A or that B is integral over A. It can be shown that the 
elements of B which are integral over A form a subring, say C, of B. If C = A, we say that A is 
integrally closed in B. A domain is called integrally closed or normal if it is integrally closed in its 
quotient field. Basic example of an integrally closed ring is 7Z, the ring of integers. (Verify!) If K 
is a number field, then the elements of K which are integral over 7L form an integrally closed ring, 
which is denoted by Ok and called the ring of integers of K. 

Proposition. Let A be a domain with K as its quotient held. Then we have the following. 

(i) If an element a (in some extension of K) is algebraic over K, then there exists c £ A such 
that c / and ca is integral over A. Consequently, if {ol\, . . . , ct n } is a K -basis of L, then 
there exists d G A such that d / and {dcti, . . . , da n } is a K -basis of L whose elements are 
integral over A. 

4 here, and hereafter, by a ring we mean a commutative ring with identity. 
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(ii) If A is integrally closed, and f(X), g(X) are monic polynomials in K[X] such that f(X)g(X) G 
A[X], then both f(X) and g(X) are in A[X}. 

(Hi) If A is integrally closed, L/K is a finite separable extension and a G L is integral over A, 
then the coefficients of the minimal polynomial of a over K as well as the field polynomial 
of a w.r.t. L/K are in A. In particular, Tr^/^-(a) G A and Ni/x(a) G A, and moreover, 
if {ai,..., a n } is a K -basis of L consisting of elements which are integral over A, then 
Dl/k(<*i, ■■■ ,a n ) e A. 

Proof: (i) If a satisfies the monic polynomial X n + a\X n ~ l + . . . + a n G if [-X], then we can find 
a common denominator c G A such that c 7^ and aj = ^ for some Cj G A. Multiplying the above 
polynomial by c n , we get a monic polynomial in A[X] satisfied by ca. 

(ii) The roots of f(X) as well as g(X) (in some extension of K) are integral over A because they 
satisfy the monic polynomial f(X)g(X) G -A[-X]- Now the coefficients of f(X) as well as g(X) 
are the elementary symmetric functions of their roots (up to a sign), and therefore these are also 
integral over A. But the coefficients are elements of K. It follows that both f(X) and g(X) are in 
A[X}. 

(iii) If a is integral over A, then clearly so is every conjugate of a w.r.t. L/K. Now an argument 
similar to that in (ii) above shows that the coefficients of Irr(a, K) as well as the field polynomial 
of a w.r.t. L/K are in A. □ 

It may be observed that a proof of the FACT in §1.2 follows from (ii) above. We are now ready 
to prove the following important result. 

Finiteness Theorem: Let A be an integrally closed domain with quotient field K. Assume that 
L/K is a finite separable extension of degree n. Let B be the integral closure of A in L. Then B 
is contained in a free A-module generated by n elements. In particular, if A is also assumed to be 
noetherian, then B is a finite A-module and a noetherian ring. 

Proof: In view of (i) in the Proposition above, we can find a .KT-basis {a\, . . . , a n } of L, which is 
contained in B. Let {(3\, . . . , (3 n } be a dual basis, w.r.t. the nondegenerate bilinear form Tr L / K (xy), 
corresponding to {a±, . . . ,a n }. Let x G B. Then x = bj(3j for some bj G K. Now Tr(ajx) = 
J2j bjTr(otif3j) = bi. Moreover, since cnjX is integral over A, it follows from the Proposition above 
that b{ G A. Thus B is contained in the ^4-module generated by . . . , f3 n . This module is free 
since (3\,...,(3 n are linearly independent over K. □ 

We will derive a useful consequence of this when A is a PID using the following lemma. 

Lemma: Let A be a PID and M be a finite A-module generated by n elements. Then every 
submodule N of M is generated by n elements. 

Proof: We prove by induction on n. If n = 1, then M = Ax, and letting a to be a generator 
of the ideal {a G A : ax G N} of A, and y = ax, we see that N = Ay. Assume that n > 1 
and that the assertion holds for smaller values of n. Suppose M = Ax\ + . . . + Ax n . We let 
Mi = Ax2 + • • • Ax n and note that, by induction hypothesis, we can find 7/2, • • • , Vn G N such that 
N n Mi = Ay 2 + ... + Ay n . We have 

N/(N n Mi) ~ (TV + M 1 )/M 1 C M/M x . 
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Now M/Mi is clearly isomorphic to a submodule of Ax±, and hence so is M/(N n Mi). By the 
case n = 1, it follows that there exists yi E N such that £/i = yi + (iV n Mi) generates AT/ (N n Mi) 
as an A-module. Consequently, iV = Ayi + At/2 + . . . + Ay n , as desired. □ 

Corollary: Let A, K, L, n, B be as in the Finiteness Theorem. Assume that A is a PID. Then B 
is a free A-module of rank n, i.e., there exist n linearly independent elements yi, ■ ■ ■ ,y n G B such 
that B = Ayi + . . . + Ay n . □ 

The above Corollary applied in the particular case of A = 7L, shows that the ring of integers 
of a number field always has a 2Z-basis. Such a basis is called an integral basis of that number 
field. If {ai, . . . , a n } is an integral basis of a number field K, then by (iii) in the Proposition above, 
we see that D L / K (a±, . . . , a n ) is an integer. Further, if {ui, . . . , u n } is any Q-basis of K which is 
contained in Ok, then Ui = J2j a ij a j f° r some n x n nonsingular matrix (a^) with entries in 2Z. If 
d = det(ajj), then d G 7L and we have D L / K (u±, . . . , u n ) = d 2 D L / K (ai, . . . , a n ). If {u\, . . . , u n } is 
also an integral basis, then clearly d = ±1. It follows that any two integral bases have the same 
discriminant, and among all bases of K contained in Ok, the discriminant of an integral basis has 
the least absolute value. 

Remark: The last observation can be used to give an alternate proof of the existence of an integral 
basis. Namely, by picking a Q-basis of K contained in Ok whose discriminant has the least possible 
absolute value, and showing that this has to be an integral basis. Try this! Or see [5] for a proof 
along these lines. 

The previous discussion shows that the discriminant of an integral basis of a number field K 
depends only on the field K. It is called the (absolute) discriminant of K and is denoted by dK- In 
general, if A is an integrally closed domain with quotient field K, L/K is finite separable of degree 
n, and B is the integral closure of A in L, then instead of a single number such as dK, one has to 
consider the ideal of A generated by the elements D L / K {ai, ... , ct n ) as {ai, . . . , a n } vary over all 
K— bases of L which are contained in B; this ideal is called the discriminant ideal of B j A or of L/K, 
and is denoted T>b/a- in case A happens to be a PID (which is often the case in number theoretic 
applications), we can replace this ideal by a generator of it, which then plays a role analogous to 
dK- Let us also note that we can consider the discriminant ideal for the extension C/k where k 
is a PID (in particular, k may be a field) and C is a ring which contains k as a subring and C is 
of free module of finite rank n over k. In this case T>c/k is defined to be the ideal of k generated 
by the elements D c j k {u\, . . . , u r ) as {ui, . . . , u r } vary over all A;-bases of C. It may be noted that 
these two definitions of discriminant ideal are consistent. 

We now discuss two examples to illustrate the computation of discriminant and determination 
of integral bases. 

Example 1: Quadratic Fields. 

Let K be a quadratic field and O be its ring of integers. As noted before, we have K = Q(y / m), 
where m is a squarefree integer. We now attempt to give a more concrete description of O. First, 
note that 7Z[y/m\ = {r + s^/m : r, s £ 7L} C O. Let x = a + b^fm G O for some a, b G Q. Then 
Tr(a;) = 2a and N(x) = a 2 — mb 2 (verify!) and both of them must be in 7L. Since m is squarefree 
and a 2 — mb 2 6 7L, we see that a G 7L if and only if b G TL. Thus if a £ 7L, then we can find an odd 
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integer a\ such that 2a = a\, and relatively prime integers 61 and c\ with c± > 1 such that b = ^. 
Now 

(ai = 2ae7L and a 2 - m6 2 effi)^ (4|c 2 a 2 and c 2 |4m& 2 ) c\ = 2. 

Hence 61 is odd and a\ — mb\ = 0(mod 4). Also a\ is odd, and therefore, m = l(mod 4). It follows 
that if m ^ l(mod 4), then a,b G and so in this case, = {a + b^fm : a, b G /Z} and {1, \/m} 
is an integral basis. In the case m = l(mod 4), the preceding observations imply that 

m \a\-\-b\Jm . . I 

C C j : 01, 61 are integers having the same parity, i.e., a\ = 61 (mod 2) > 

and, moreover, ±±*^ G O since it is aroot of X 2 -X-'^-; therefore O = TL\^^-\ and {1, l± ^ L } 
is an integral basis. We can now compute the discriminant of K as follows. 



d K = { 




= Am if m = 2, 3(mod 4) 

= m if m = l(mod 4). 



It may be remarked that the integer d = dx determines the quadratic field K completely, and the 
set {1, d +^d } is always an integral basis of K. (Verify!) 

Example 2: Cyclotomic Fields. 

Let p be an odd prime and ( = ( p be a primitive p th root of unity. Consider the cyclotomic 
field K = Q(C)- We know that K/Q is a Galois extension and its Galois group is isomorphic to 
(2&/p2L) x , which is cyclic of order p — 1. The minimal polynomial of ( over Q is given by 

$ p (x) = = xp- 1 + xv~ 2 + ... + x + i = \[{x-c i ). 

1=1 

We now try to determine Ok, the ring of integers of K, and dx, the discriminant of K. Let us 
first note that since ( G Ok, the ring Z5[£], which is generated as a ^-module by 1, £, C 2 ) • • • , C p ~\ 
is clearly contained in Ok- Moreover, we have 

JW 1 . c*- 1 ) = (-i) (p - 1){p - 2)/2 ^(^(0) = (-i) {p - 1)/2 ^ /Q (^y) • 

Since $ p (X) = + A p ~ 2 + . . . + X + 1 is the minimal polynomial of £ over Q, we clearly see 

that N k /q(0 = (— l) p_1 -1 = 1. And since the minimal polynomial of ( — 1 is 

%(x + 1) = {X + 1 / - 1 = t ( •) ^ = xp - 1 + p xp - 2 + ...+ fyx + p, 



18 



we see that N(( - 1) = (-l) p_1 p = p. Thus N($' p (Q) = = p^ 2 . On the other hand, 

N(( — 1) is the product of its conjugates, and so we obtain the identity 

P = (C-i)(C 2 -i)-..(C p - 1 -i), 

which implies that the ideal (( — 1)Ok n 7L contains pTL. But (( — 1) is not a unit in Ok (lest 
every conjugate (£' — 1) would be a unit and hence p would be a unit in 2Z). So it follows 
that (C — 1)Ok = p2Z. Now suppose x G O^. Then x = Co + ci£ + . . . + c p _iC p_1 for 
some Cj G Q. We shall now show that Cj are, in fact, in 2Z. To this effect, consider (£ — l)x = 
c (C-l) + ci(C 2 -C) + --- + c P-i(C p -C p_1 )- WehaveTr(C-l) = -p and Tr(C <+1 - 0) = 1-1 = 
for 1 < i < p. Therefore c p = -Tr((C - l)x) G (C - 1)O k Pi 2& = pTL, and so c G Next, 
£ _1 (x — Co) = C p ~ lc o is an element of which equals c\ +C2C + • • - + Cp-iC p_2 - Using the previous 
argument, we find that c\ G 7L. Continuing in this way, we see that Cj G TL for < i < p — 1. It 
follows that = 2Z[£] and {l,C,C 2 i • • • >C p1 } is an integral basis of Ok- As a consequence, we 
obtain that 

d K = D m (i, c, C 2 , • • • , C" 1 ) = (-i)^ 1),2 f- 2 . 

Exercise 1.8: Let n = p e where p is a prime and e is a positive integer. Show that the ring 
of integers of Q(£ n ) is 7L[Q n ] and the discriminant of Q(C„) is equal to (-l^^pP^ 1 ^-^ 1 ). 
Deduce that, in particular, the only prime dividing this discriminant is p and that the sign of this 
discriminant is negative only if n = 4 or p = 3 (mod 4). 

Remark: If n is any integer > 1 and £ = Q n is a primitive n th root of unity, then it can be shown 
that the ring of integers of Q(Cn) is Z5[Cn] an d the discriminant of Q(Cn) equals 

(_ 1 )(p(n)/2. 



n Pl nP^ n)/{p - iy 

The proof is somewhat difficult. Interested reader may see [13]. 

Exercise 1.9: If K is either a quadratic field or a cyclotomic field, then show that cIk = 
or l(mod 4). 
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Chapter 2 

Ramification Theory 



In the investigation of Fermat's Last Theorem and Higher Reciprocity Laws, mathematicians in the 
19th century were led to ask if the unique factorization property enjoyed by the integers also holds 
in the ring of integers in an algebraic number field. In 1844, E. Kummer showed that this does not 
hold, in general. About three years later, he showed that the unique factorization in such rings, or 
at least in rings of cyclotomic integers, is possible if numbers are replaced by the so called "ideal 
numbers". Kummer's work was simplified and furthered by R. Dedekind, whose results were first 
published in 1871. 1 The concept of an ideal in a ring was thus born. In effect, Dedekind showed 
that the ring of integers of an algebraic number field has the following property: 

Every nonzero ideal in this ring factors uniquely as a product of prime ideals. 
Integral domains with this property are now known as Dedekind domains (or also Dedekind rings). 
Following the ideas of Emmy Noether, it can be proved that a domain A is a Dedekind domain if 
and only if it satisfies any of the following equivalent conditions. 

(1) A is integrally closed, noetherian, and every nonzero prime ideal of A is maximal. 

(2) Every nonzero ideal of A can be factored as a product of prime ideals. 

(3) Fractionary ideals of A (i.e., finitely generated A-modules contained in the quotient 
field of A), excluding the zero ideal, form a group under multiplication. 

Now in the ring of integers of a number field, a prime p of TL may not remain a prime. For 
instance in the ring of integers of Q( v / — T), 2 and 5 are no longer primes but 3 is. However, by the 
above result of Kummer-Dedekind, the ideal generated by p in this ring can be uniquely factored 
as a product of prime ideals. This phenomenon may be loosely described as ramification. In this 
chapter, we shall study some fundamental results concerning this phenomenon. 

1 Another approach towards understanding and extending the ideas of Kummer was developed by L. Kronecker, 
whose work was apparently completed in 1859 but was not published until 1882. For more historical details, see the 
article "The Genesis of Ideal Theory" by H. Edwards, published in Archives for History of Exact Sciences, Vol. 23 
(1980), and the articles by P. Ribenboim and H. Edwards in "Number Theory Related to Fermat's Last Theorem", 
Birkhauser, 1982. 
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2.1 Extensions of Primes 



Formally, our stating point is the following result. 

Extension Theorem. Let A be a Dedekind domain, K its quotient field, L a finite separable 
extension of K, and B the integral closure of A in L. Then B is a Dedekind domain. 

It may be noted that this theorem follows quickly using the Finiteness Theorem proved in §1.5 
and some elementary properties of integral extensions (cf. [14]). Also note that, since 2Z is obviously 
a Dedekind domain, this result proves that the ring of integers of a number field is a Dedekind 
domain. 

In the remainder of this section, we shall assume that A, K, L, B are as in the Extension Theorem 
above. We will also let n denote the degree of L/K. 

Definition. Let p be a prime ideal of A. A prime ideal P of B is said to lie over p if P n A = p. 

Since B is a Dedekind domain, for any nonzero prime ideal p of A, the extension pB of p to B 
is a nonzero ideal of B and hence it can be uniquely written as 

pB = f[Pt 

i=i 

where Pi, Pi, ■ ■ ■ , P g are distinct nonzero prime ideals of B and are positive integers. 

Exercise 2.1: With p and Pi as above, show that a prime ideal P of B lies over p iff P = Pj for 
some i. Also show that pB n A = p = P^ 1 n A. Deduce that B/pB as well as B/PpB can be 
regarded as vector spaces over the field A/ p. Further show that B/Pi is a field extension of A/p 
whose degree is at most n. 

Definition. With p, Pi, etc. as above, the positive integer e$ is called the ramification index of Pj 
over p and is denoted by e(Pj/p); the field degree [B/Pi : A/p] is called the residue degree (or the 
residue class degree) of Pj over p and is denoted by f(Pi/p). If ei > 1 for some i, then we say that 
p is ramified in B (or in L). Otherwise, it is said to be unramified. 2 The extension L/K is said 
to be unramified if every nonzero prime ideal of A is unramified in L. 

Exercise 2.2: Let A, K, L, B and p be as above. Suppose L' is a finite separable extension of L 
and P' is the integral closures of B in L' . Show that B' is the integral closure of A in V . Further, 
if P a prime of B lying over p and P' a prime of B 1 lying over P, then show that P' lies over p 
and the following transitivity relations hold: 

e{P'/p)=e{P'/P)e{P/p) and f(P'/p) = f(P'/P)f(P/p). 

Before proving the main result of this section, let us recall some preliminary results about 
Dedekind domains which we shall use in the sequel. If some of these seem unfamiliar, then they 
are likely to be trivial, and the reader is encouraged to prove them as exercises. 

2 To be accurate, we should define p to be ramified if a > 1 for some i or B/Pi is inseparable over A/p for some 
i. However, in number theoretic applications, A/p will usually be a finite field and so the question of separability of 
residue field extensions doesn't arise. 
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1. If S is any multiplicatively closed subset of the Dedekind domain A such that 0^5, then the 
localisation S~ 1 A of A at S is a Dedekind domain. Moreover, the integral closure of S~ X A 
in L is S^B. 



2. A Dedekind domain having only finitely many prime ideals is a PID. 

3. A local Dedekind domain is a PID having a unique nonzero prime ideal. 

Theorem. Let A, K, L, B he as above and n = [L : K]. Suppose p is a nonzero prime ideal of A 
and we have 

i=i 

where P\, P2, . . . , P g are distinct prime ideals of B and positive integers. Then, upon 

letting fi = [B/Pi : A/p], we have 

9 

eifi = n. 

i=i 

Proof: Let S = A\p and A' = S _1 A be the localisation of A at p. Then B' = S~ 1 B is the integral 
closure of A' in L, and pB' = P{ ei . . . P'^ a , where P[ = P{B' . Moreover, the primes P[, . . . ,P' 
are distinct, A'/pA' ~ A/p and B' jP[ ~ B/Pi. Thus we see that in order to prove the equality 
J2 e ifi = n > we can replace A, B, p, Pi by A', B', p', P[ respectively. 

In view of the observations above, we shall assume without loss of generality that A is a local 
Dedekind domain with p as its unique nonzero prime ideal. Then, by the Corollary to the Finiteness 
Theorem (cf. §1.5), B is a free ^-module of rank n = [L : K\. Write B = Ay\ + . . . + Ay n , where 
yi, . . . ,y n are some elements of B. Now for the vector space B/pB over A/p, we clearly have 

n 

B/pB = J2(A/p)y i 
i=i 

where y~i denotes the residue class of y, mod pB. Moreover, 

^2 am = => ^2 aiyi £ pB => a, G p 

where Oj G A and a, denotes its residue class mod p, and the last implication follows since 
{yi, . . . ,y n } is a free A-basis of B. It follows that y\,...,y n are linearly independent over A/p, 
and hence 

dim A/p B/pB = n. 

Now we count the same dimension by a different method. To this effect, note that pB = P^P^ 2 . . . Pg 
and, since Pi, P2, ■ ■ ■ , P g are distinct maximal ideals, P/' and Pj 3 are comaximal 3 for all i 7^ j. 

3 Two ideals I and J in a ring i? are said to be comaximal if I + J = R. 
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Hence, by Chinese Remainder Theorem 4 , we get an isomorphism (of rings as well as of (^4/p)-vector 
spaces) 

Now let us find the dimension of the A/p-vectov space B/P e where P = Pi and e = e« for some i. 
First, we note that for any j > 1, ppi C P J ' +1 , and hence pi jpi +1 can be considered as a vector 
space over A/p. We claim that we have an isomorphism 

B/P e ~B/P® P/P 2 © ... © P e ~ l /P e . 

To see this, use induction on e and the fact that for e > 1, we clearly have 

B/P*- 1 ~ 



pe-1 ^pe ' 

Next, we note that B is a Dedekind domain having only finitely many prime ideals (in fact, (0) 
and Pi, . . . , P g are the only primes of B), and so B must be a PID. Let t be a generator of P, and 
consider the map 

B/P^P j /P j+1 

induced by the multiplication map x i— > t 3 x of P — > P J . This map is an A/p-homomorphism, and 
it is clearly bijective. So 

dim A/p (PVP^ +1 ) = dhn A/p (B/P) = /(P/p) 

and consequently, from the above direct sum representations, we get 

a 9 
dim A/p (B/pB) = £dim A/p (B/if ) = 

i=i i=i 

which yields the desired identity. This completes the proof. □ 

Examples: 

1. Consider the quadratic field K = Q(z), where i denotes a square root of —1. We know that 
Ok is the ring 2L[i] of Gaussian integers. If p is a prime = l(mod 4), then we know (by a classical 
result of Fermat) that p can be written as a sum of two squares. Thus there exist a,b 6 7L such 
that p = a 2 + b 2 = (a + bi)(a — bi). It can be seen that (a + bi) and (a — bi) are distinct prime 
ideals in Ok- Thus for the prime ideal p7Z, we have g = 2, ei = e2 = 1 and (since J2 e ifi = 2) 
/i = /2 = 1. On the other hand, it is not difficult to see that a prime = 3 (mod 4) generates a 
prime ideal in 7L[i] and so for such a prime, we have # = 1 = e\ and j\ = 2. The case of p = 2 is 
special. We have 2 = (1 + — i). But (1 + i) and (1 — i) differ only by a unit (namely, — i) and 



4 Recall that (a version of) the Chinese Remainder Theorem states that if ii, . . . , I n are pairwise comaximal ideals 
in a ring R (i.e., Ii + Ij = R for all i =fc j), then the map a;(mod hh ■ ■ ■ I n ) i— > (a^(mod ii), . . . , x(mod /„)) defines 
an isomorphism of R/I1I2 ■ ■ ■ I n onto the direct sum R/ Ii® R/ 12® ■ ■ ■ ® R/In- Equivalently, for € R, 

there exists x e R such that x = a;j(mod Ij) for 1 < j < n. 
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thus they generate the same prime ideal. So 2 is a ramified prime and for it, we have g = 1 = f\ 
and ei = 2. 

2. During the discussion in §1.5 of the example of p th cyclotomic field K = Q(Cp), we have 
proved the identity 

P = (C-i)(C 2 -i)--.(C p - 1 -i), 

and also the fact that (£ — 1)Ok HK = pTL. We note that for any integer i not divisible by p, we can 
find an integer j such that ij = l(mod p), and thus (( l — 1) / (( — 1) = 1 + £ + ... + C* -1 € Zj[C] an d 
its inverse (C-1)/(C*-1) = (Cj - 1)/(C - 1) is also in 7L[C). Therefore, the fraction (Q-\)/(C,-l) 
is a unit in Z5[£]. Consequently, {Q l — 1) and (£ — 1) generate the same ideal, say P. Now the above 
identity together with the previous Theorem shows that p7L[C] = P p ~ l and P is a prime ideal. 
Thus we find that in this case g = 1 = j\ and e\ = p — 1 = [K : Q]. 

The last example illustrates the following definition. 

Definition. A nonzero prime ideal p of ^4 is said to be totally ramified in L (or in B) if pi? = P n 
for some prime ideal P of B. 

2.2 Kummer's Theorem 

In this section we prove a theorem, due to Kummer, which shows how the decomposition of extended 
prime ideals can be "read off" from the factorization of a polynomial, for a certain class of rings. 
It may be observed that the hypothesis of this theorem is satisfied in the case of quadratic and 
cyclotomic extensions. 

We shall use the following notation. Given a domain A and a maximal ideal p in A, we let A, 
denote the residue field A/p; for any polynomial p(X) G A[X], by p(X) we denote its reduction 
mod p, i.e., the polynomial in A[X] whose coefficients are the p-residues of the corresponding 
coefficients of p(X). 

Theorem. Let A be a Dedekind domain, K its quotient field, L a finite separable extension of K, 
and B the integral closure of A in L. Let p be a nonzero prime ideal of A. Assume that B = A[a] 
for some a € B. Let f(X) = Irr(a, K). Suppose 

Kx) = f{p l {xr 

is the factorization of f(X) into powers of distinct monic irreducible polynomials in A[X]. Let 
Pi(X) be the monic polynomial in A[X] whose reduction mod p is pi(X). Then the primes in B 
lying over p are precisely given by P±, . . . , P g where Pi = pB + pi(a)B. Moreover, 

i=i 

is the factorization of pB into powers of distinct primes in B, the ramification index of Pi over p is 
the above exponent ei, and the residue degree fa of Pi over p is the degree of the irreducible factor 
Vi{X). 
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Proof: Fix some i with 1 < i < g. Let be a root of pi(X). Consider the maps 

A[X\ - A[X] - A[X]/( Pi (X)) ~ Afo] 

where the first map sends a polynomial in A[X] to its reduction mod p, and the second one is the 
natural quotient map. The composite of these maps is a homomorphism from A[X] onto 
and its kernel is clearly given by pALY] + pi(X)A[X\. This kernel contains f(X), and thus we get 
the induced map of A[X]/(f(X)) onto A[<5j]. Since B = A[a] ~ A[X]/(f(X)), we get a map ipi of 
B onto Note that ker^j is equal to pB + pi(a)B. Since pi(X) is irreducible in kenpi 

is a prime ideal in B which contains p. It is therefore a maximal ideal in B lying over p. Also A 
is a field and 

[B/keitpi : A/p] = dim A A[ai] = degpi(X). 
Now suppose P is any maximal ideal of B lying over p. Since 

f(x)- P1 (xr... Pg (xr^pA[x] 

and f(a) = 0, we see that 

Pl (a) ei ...p 3 (a) e « epBCP 

and hence Pi(a) £ P for some i, and then it follows that P must be equal to pB +pi(a)B. This 
shows that the primes lying in B over p are precisely Pi, . . . , P g where Pj = pB + pi(a)B, and that 
the residue degree fi = f(Pi/p) equals degpi(X). To prove the remaining assertion, let e! i denote 
the ramification index of Pj over p, so that 

pB = P?i...Pg*. 

Since Pj = pB + pi(a)B, we have 

C pB+ Pi (a) e 'B 

and hence, in view of the above observation that p\(a) ei . . .p g (a) e9 G pP, we have 

Pf 1 . . . P** C pP + Pl (a) ei . . . p 9 (a) e «P C pP = Pf 1 . . . P 9 e «. 
Consequently > e\ for all i But we know that 

eifi = deg f(X) = [L:K] = j2 <fi- 
i=i i=i 

Therefore ej = for all i This completes the proof. □ 

2.3 Dedekind's Discriminant Theorem 

Suppose we have a number field K whose ring of integers Ok is of the form 7L[a\. Let f(X) be 
the minimal polynomial of a over Q and p be a rational prime 5 . Let f(X) G 7L/p7L[X] denote the 

5 It is a common practice in Number Theory to call the usual primes as rational primes (and the usual integers as 
rational integers) so as to distinguish from primes (and integers) in the rings of integers of algebraic number fields. 
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reduction of f(X) mod pTL. Then, by Kummer's Theorem, p ramifies in K iff f(X) has a multiple 
root. Now in view of the Remark preceding Hilbert Theorem 90 in §1.3, the polynomial f(X) has 
a multiple root iff its (classical) discriminant is zero (as an element of TL/pTL). The last condition 
means that Discx/ (A) = ±dx is divisible by p. Thus we find that in this situation we have: 

p ramifies in K iff p divides dx ■ 

In fact, this turns out to be true even in a more general situation. This section is devoted to a 
proof of this fundamental result, which is due to Dedekind. 

Theorem. Let A be a Dedekind domain and K he its quotient field. Let L be a finite separable 
extension of K of degree n, and B be the integral closure of A in L. Let p be a nonzero prime 
ideal of A. Assume that the field A/p is perfect (which means that every algebraic extension of 
this field is separable) 6 . Then we have: 

p ramifies in L p D T^b/a- 

In particular, if the above assumption on the residue field is satished by every nonzero prime ideal 
of A, then there are only a finitely many prime ideals in A which ramify in L. 

Proof: If we consider the localisations A' = S~ 1 A and B' = S~ 1 B where S = A \ p, then it is 
readily seen that ^b'/A' = T^b/aA' and p ramifies in L iff p' = pA' ramifies in L. Thus to prove 
the first assertion, we can and will assume without loss of generality that A is a local Dedekind 
domain and p is its unique maximal ideal. 

Let pB = P^P^ 2 • • • Pg 9 , where Pi, P2, . . . , P g are distinct prime ideals of B and ei, e2, ■ ■ ■ , e g 
are their ramification indices. As noted in the proof of the Theorem in §2.1, we have pB n A = 
p = Pj 6i n A, and we have an isomorphism of ^4/p-vector spaces 

i=i 

Let us set A = A/p and B = B/pB. For x G B, let x denote the image of x in B. Note that we 
clearly have 

Tr S/A (x) =Tr L/K (x) for all x G B. 

Now if . . . , a n } is any if -basis of L contained in B such that {ai, . . . , a n } is an A-basis of B, 
then using the above identity for traces, we see that 

d b/a{^ • • • , «n) = Di/Kion, a n ). (1) 

Next, we show that if B ~ Bi © . . . © B g , where the isomorphism is of ^4-vector spaces, then we 
have 

g 

^b/A = U V b,/A- (2) 

i=i 

6 This assumption would always be satisfied in number theoretic applications since A/p would usually be a finite 
field. 
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To see the above identity, it suffices to consider the case when g = 2 since the general case would 
follow by induction on g. For convenience of notation, let us denote the element of B corresponding 
to (u, 0) G B\ © §2 by u itself and, similarly, the element of B corresponding to (0, v) G B\ © B2 
by v itself. It is clear that we can choose ^4-bases {u±, . . . ,u r } and {v±, . . . ,v s } of B\ and B2 
respectively such that {u±, . . . , u r , v±, . . . , v s } is an A-basis of B. In view of the above convention, 

0, and so 



we see that UiVj = 0. Thus Tr B/A( u i v j 



d b/a( u i> ■ ■ ■ ,u r ,vi,. . . ,v s 



tv( w ) ; 

Ti(v jVr ) 



B 2 /A\ 



Since A is a field and the non-vanishing of any of the above discriminants is independent of the 
choice of the corresponding yi-bases, the desired equality of discriminant ideals follows. Thus we 
have proved (2). 

Now suppose p is a ramified prime. Then > 1 for some i and thus the ring B/P^ 1 contains 
a nonzero nilpotent element (which may be taken to be any element of -Pf 4-1 \ -Pf')> an d hence 
so does B. Let (3 G B be such that (3 G B is a nonzero nilpotent element. Extend {(3} to an 
^4-basis . . . ,/?„} of B with (3\ = (3. Since (3\ is nilpotent, so is (3~ij3j for 1 < j < n. Hence 
Tr(/3i/3j) = for 1 < j < n [because if u G B is nilpotent, then is clearly the only eigenvalue 
of the linear transformation x 1— > ux of B — > B and Tr(n) equals the sum of all eigenvalues of 
this linear transformation]. Consequently, -Dg/^(/?i, . . . , (3 n ) = 0, and so V^/a 1S the zero ideal. 
Thus if {«i, . . . ,a n } is an A-basis of B (which exists by Finiteness Theorem), then {a±, . . . ,a n } 
is an A-basis of B and in view of (1), we see that D L / K (a\, . . . ,a n ) G pB. It follows that 
V B/A C pB n A = p. 

To prove the converse, assume that p 5 T^b/a- Suppose, if possible, p is unramified. Then 
ei = 1 for all i and thus B is isomorphic (as an A-vector space) to the direct sum of the fields 
Bi = B/Pi. Since A is perfect, the extension BijA is separable, and therefore T^Bi/A 7^ 0' f° r 
1 < i < 9- Thus by (2), we have V^/a 7^ 0- But, in view of (1), this contradicts the assumption 
that V b /a Q p- It follows that p must be a ramified prime. 

The final assertion concerning the number of ramified prime is an immediate consequence of the 
characterization proved above and the fact that V b /a is a nonzero ideal of the Dedekind domain 
A. ' □ 

Corollary. Let K be a number field. A rational prime p ramifies in K iff p divides dx- In 
particular, only finitely many primes of 7L ramify in K. □ 

Remark: A related result in connection with the above Corollary is that if K is any number field 
other than Q, then \dx\ > 1. Consequently, there exists at least one rational prime which ramifies 
in K. The proof of this result, due to Minkowski, is rather involved. See [8] for details. 

2.4 Ramification in Galois Extensions 



In the case of Galois extensions, the fundamental identity J2 e ifi = n : which was proved in §2.1, 
takes a particularly simple form. This short section is devoted to a proof of this simpler identity. 
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The key idea in the proof is the "norm argument" in the Lemma below. 

Lemma. Let A be an integrally closed domain, K its quotient field, L a Galois extension of K, 
B the integral closure of A, and p a prime ideal of A. Then the primes of B lying over p are 
conjugates of each other, i.e., for any prime ideals P,Q of B such that PnA = p = QnA, we have 
Q = a(P) for some a G G&\(L / K) . In particular, the number of prime ideals of B lying over p is 
finite, and , in fact, < [L : K]. 

Proof: We use a similar reduction as in the proof of the Theorem in §2.1. Thus we note that if 
S = A \ p, then the integral closure of A' = S* _1 A in L is B' = S~ 1 B, and PB' and QB' are prime 
ideals of B' lying over pA' . Moreover if QB' = a(PB'), for some a 6 Gsl(L/K), then we clearly 
have 

Q = QB'C\B = a(PB') n B = a(PB') n a(B) = a(PB' n B) = a{P). 

So we assume without loss of generality that p is a maximal ideal of A. Now since B/A is integral, Q 
and P are maximal ideals of B. Suppose Q / cr(P) for any a G G&\{L/K). By Chinese Remainder 
Theorem, we can find some x 6 B such that 

x = 0(modQ) and x = l(modcr(P)) Vcr £ Gal(L/K). 

Consider the norm 

n l/ k(x) = n a t x )- 

cr£Gal(L/X) 

By the Proposition in §1.5, this lies in A and hence in Q n A = p. Now P is a prime ideal of B 
containing p, and thus it follows that a(x) € P for some a € G&\(L/K). But this contradicts the 
choice of x. □ 

Corollary: Let A be an integrally closed domain, K its quotient held, L a finite separable extension 
of K, B the integral closure of A in L, and p a prime ideal in A. Then there exists only a hnite 
number of prime ideals in B lying over p. 

Proof: Let L' be a least Galois extension of K containing L and B' be the integral closure of A in 
V . Suppose P and Q are distinct prime ideals in B lying over p. Since B' is integral over B, there 
exist prime ideals P' and Q' in B' lying over P and Q respectively. Clearly P' and Q' are distinct 
and they both lie over p. Hence, by the above Lemma, we get the desired result. □ 

Theorem. Let A be a Dedekind domain, K its quotient held, L a Galois extension of K, B the 
integral closure of A, and p a nonzero prime ideal of A. Then for the primes of B lying over p, the 
rami&cation indices are the same and the residue degrees are the same. In other words, we have 

pb = {p 1 p 2 . . . p 9 r 

where P±, . . . , P g are distinct prime ideals of B, and /(Pi / p) = ■ ■ ■ = f(P g / p) (= f say). Moreover, 
if we let n = [L : K], then we have 

efg = n. 

Proof: Let pB = Pf 1 . . . P 9 9 , where Pi , . . . , P g are distinct prime ideals of B, and let fi = f(Pi/p) 
for 1 < i < g. For any a G Gal(L/K), we clearly have a(p) = p and a(B) = B, and hence 
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a{pB) = pB. By the above Lemma, for any i with 1 < i < g, there exists a G G&\(L/K) such that 
a {Pi) = P\, and consequently, B/Pi ~ a{B)/a{Pi) = B/P\. Thus = ei and /j = /i. Since we 
have already shown that J2f=i e ifi = n > the theorem follows. □ 

Remark: With the notation and assumptions as in the above Theorem, we see that the ramification 
index e{P/ p) of a prime P of B lying over p is independent of the choice of P. Thus it is sometimes 
denoted by e p . Likewise, in the case of Galois extensions, the notation f p and g p is sometimes 
used. 



2.5 Decomposition and Inertia Groups 

The identity efg = n, proved in the last section, is a starting point of a beautiful theory of 
ramification of primes developed by Hilbert. Some basic aspects of this theory will be discussed in 
this section. In order to avoid repetition, we state below the notations and assumptions that will 
be used throughout this section. 

Notation and Assumption: Let A be a Dedekind domain and K be its quotient field. Let L 
be a Galois extension of K and B be the integral closure of A in L. Let G denote the Galois group 
of L/K. Let p be a nonzero prime ideal of A. Let A = A/p. Assume that A is a perfect field. 7 
Let e = e p , f = f p . and g = g p . 

Observe that \G\ = [L : K] = efg. Also note that if P is any prime of B lying over p, then the 
set primes of B lying over p is precisely {o~{P) : a G Gal(L/A)}. Thus the Galois group G acts 
naturally on this set of g primes and the action is transitive. 

Definition. Given any prime ideal P of B lying over p, the decomposition group of P w.r.t. L/K is 
defined to be the subgroup of G consisting of automorphisms a such that a{P) = P. It is denoted 
by Dp{L/K) or simply by Dp or D if the reference to L/K and/or P is clear from the context. 
The fixed field of Dp{L/K) is called the decomposition field of P w.r.t. L/K, and is denoted by 
K D . 

Note that Dp{L/K) is the stabilizer of P for the natural action of G on the set of primes of B 
lying over p. Hence \D P {L/K)\ = \G\/g = ef. Thus [L : K D ] = ef and [K D : K] = g. Also note 
that if Q is any prime ideal of B lying over p, then Q = a{P) for some a G G, and we have 

r G D Q {L/K) r{a{P)) = a{P) a^ro G D P {L/K) 

and so Dq = aDpa" 1 . Thus if Dp is a normal subgroup of G (which, for example, is the case if 
L/K is abelian), then it depends only on p and it may be denoted by D p . 

Lemma. Let P be a prime ideal of B lying over p, and D = Dp{L/K) be its decomposition group. 
Let Ap, = B n Kp, be the integral closure of A in Kp, and let Pp, = P n Ap>. Then P is the only- 
prime of B lying over Pp, and we have 

P D B = P e and f{P/P D ) = f. 
7 In number theoretic applications, A will usually be a finite field and thus this assumption is valid. 
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If D is a normal subgroup of G, then Kd/K is a Galois extension and pAo is a product of g 
distinct and conjugate primes of Kd with residue degree 1. 

Proof: Since L/Kd is Galois, the set of primes of P lying over Pjj is given by {<r(P) : a G 
Gal(L/K D )} = {P}. Further, if e' = e{P/P D ) and /' = /(P/P D ), then we know from Exercise 2.2 
that e'\e and f'\f. On the other hand, e'f = [L : Kd] = ef. Hence e' = e and /' = /. This proves 
our first assertion, and also it shows that e(Po/p) = 1 and /(Pd/p) = 1- If -D is normal, then 
clearly Kd/K is Galois and e(P'/p) = 1 = f(P'/p), for any prime P' of Ad lying over p. Since 
[Kd : K\ = we obtain the desired result. □ 

For the remainder of this section, let us fix a prime P of B lying over p and let D = Dp(L/K). 
Let P = P/P. Then P is a field extension of A of degree /. By our assumption, B/A is separable. 
Now if a G D, then a clearly induces an ^4-automorphism a of P. We thus obtain a homomorphism 

e : D -► Gal(B/A) defined by e(cr) = a. 

The kernel of e is called the inertia group of P w.r.t. L/if and is denoted by Tp(L/K) or simply 
by Tp or T. Clearly, T is a normal subgroup of D. Note that the inertia group can be alternately 
defined as follows. 

T P (L/K) = {o-eG: a(x) = x(mod P) for all x G B}. 

The fixed field of T is called the inertia field of P w.r.t. L/K and is denoted by Kp. Observe 
that K C Kd C C and Kp/Kd is a Galois extension with Galois group D/T. A better 
description of this group and its order is given by the following lemma. 

Lemma. The residue extension B/A is normal, and the homomorphism e : D —> Gal(B/A) defines 
an isomorphism of D/T onto Ga\(B / A) . 

Proof. Let a G B be any element, and a G B be its representative. Let f(X) be the minimal 
polynomial of a over K. Since a £ B, f(X) € Moreover, since L/K is normal, L and hence 

P contains all the roots of f(X). Now f(a) = and thus Irr(a, A) divides f(X), the reduction of 
f(X) mod p. It follows that P contains all the roots of Irr(<5, A). Thus B/A is normal. 

Next, we can find 6 £ B such that B = A{6) because B/A is a finite separable extension. Let 
9 G P be a representative of P. By Chinese Remainder Theorem, we can find some j3 G P such 
that for any a £ G we have 

= #(mod <t(P)) for a G P> and /3 = 0(mod a(P)) for a ^ D. 

Clearly (3 = 9 and thus P = ^4(/3). Let 7 G Gal(P/^4) be any element. As in the previous paragraph, 
we see that 7(/3) is the image of some conjugate of (3. Thus 7(/3) = <j{0) for some a G G. If a D, 
then by the choice of (3 we have a((3) G P, i.e., j(/3) = a((3) = 0, which is impossible. It follows 
that 7 = a = e(cr). This proves the Theorem. □ 

Corollary. We have \T\ = e = [L : K T ] and [K T : K D ] = f. Further, if Ap = B n Kp is the 
integral closure of A in Kp and Pp = P n Ap, then we have 

P D A T = Pp with f{P T /P D ) = f and PpB = P e with f(P/Pp) = 1. 



30 



In particular, we see that p is unramified in Kt- 

Proof: Since \D\ = ef and [B : A] = f, it follows from the previous lemma that |T| = e = [L : 
Kt] and [Kt : Kb] = /. Now if we consider the extension L/Kt and the prime P lying over 
Pt (i.e., replace K, A,p by Kt,At,Pt respectively), then we have Dp(L/Kt) = Tp(L/Kt) = 
Ga\{L/K T ) = T and the above results show that e(P/P T ) = e and e(P / P T ) f{P / Pt) = e. The 
desired result follows from this using the transitivity of ramification indices and residue degrees. □ 

Exercise 2.3: Let £ be a subfield of L containing K and Ae = B n E be the integral closure 
of A in E. Let P E = P n A E . Show that D P (L/E) = D P (L/K) n Gal(L/£?) and T P (L/E) = 
Tp(L/K)nGal(L/E). 

Exercise 2.4: Let H be the subgroup of G generated by the subgroups Tp(L/K) as P varies over 
all nonzero prime ideals of B. Let E be the fixed field of H. Show that E/K is an unramified 
extension. 

Exercise 2.5*: For n > 0, define G n = {a € G : a(x) = x(mod P n+1 )}. Show that G n are 
subgroups of G with Go = T. Prove that G n = {1} for all sufficiently large n. Also show that 
Gq/G\ is isomorphic to a subgroup of the multiplicative group of nonzero elements of B = B/P, 
and therefore it is cyclic. Further show that for n > 1, G n /G n+ i is isomorphic to a subgroup of 
the additive group B. Deduce that the inertia group T is a solvable group. 

Remark: Let K p be the completion of K w.r.t. the valuation of K corresponding to <p (whose 
valuation ring is A p ), and Lp be the completion of L w.r.t. the valuation of L corresponding to P. 
Then we know that Lp can be regarded as a field extension of K p . Since K p is complete, there is only 
one prime of Lp lying over the prime (or the corresponding valuation) of K p . And since the residue 
fields of these primes in the completions coincide with the residue fields A and B respectively, it 
follows that the residue degrees are the same. Hence using the Theorem proved in the last section, we 
see that the ramification index corresponding to Lp/K p is precisely e, and we have ef = [Lp : K p ]. 
Moreover, every element of the decomposition group D = Dp{L/K) extends by continuity to 
an JTp-automorphism of Lp, and since \D\ = ef, it follows that G&l(Lp/K p ) ~ Dp(L/K). In 
particular, if P is unramified, then T = {1} and thus D is isomorphic to Ga\{B / A). Furthermore, 
if A is finite (which is the case if K is a number field), then Ga\{B / A) is cyclic, and thus whenever 
P is unramified, we have Ga\{Lp/K p ) ~ Ga\(B / A) ~ Gal(Lp/K p ), where Lp and K p denote the 
residue fields of (the valuation rings of) Lp and K p respectively, so that the local Galois group 
G&l(Lp/K p ) is cyclic. For more on these matters, see [11] 

2.6 Quadratic and Cyclotomic Extensions 

In this section we shall consider the examples of quadratic and cyclotomic fields and try to determine 
explicitly the splitting of rational primes when extended to these number fields. 

Example 1: Quadratic Fields 

Let K be a quadratic field. As noted earlier, we have K = Q(y / m), for some uniquely determined 
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squarefree integer m (with m/0,1). Let O be the ring of integers of K. We have also seen that 



In particular, we see that the hypothesis of Rummer's Theorem (cf. §2.2) is satisfied. 

Now let p be a rational prime. We are interested in the decomposition of the extended ideal pO. 
The formula J2f=i e ifi = n shows that g as well as ej, fi can only be 1 or 2, and that the situation 
has to be one of the following. 

(i) g = 2, ei = /i = e2 = /2 = 1 so that pO = P1P2 for some distinct primes Pi, P2 of O 
with O/Pi ~ TLjpTL. In this case, we say that p is a decomposed (or spZzi) prime, or that p 
decomposes (or splits) in C 

(ii) 5 = 1, ei = 2, /1 = 1 so that pO = P 2 for some prime P of O with 0/P ~ E/pZ. In this 
case p is a ramified prime. 

(iii) £/ = l, ei = 1, /1 = 2 so that pO = P for some prime P of with [O/P : zZ/pK] = 2. In 
this case, we say that p is an inertial prime. 

Now let's figure out which one is which. First we consider 

Case 1 : m ^ l(mod 4), i.e., m = 2, 3(mod 4). 

In this case, O = 7L\y/m\ and f(X) = X 2 — m is the minimal polynomial of yfm over Q. 
By Kummer's Theorem, the factorization of pO is determined by the factorization of f(X), the 
reduction of f(X) modulo p. If p\m or p = 2, then f(X) = X 2 or (X — l) 2 , and hence (jp)(D = P 2 , 
with P = (p, \Jm) or P = (p, 1 — \/m), and p is ramified. If p/m and p / 2, then /(X) is either 
irreducible in (2Z/p2L)[X] or has two distinct roots in TLjpTL (why?). The latter is the case if and 
only if m is a square mod p, i.e., m = x 2 (mod p) for some integer x. So we know which primes are 
decomposed and which are inertial. The result can be conveniently expressed using the Legendre 
symbol, which is defined thus. 8 



O = 



TL[y/m] 



if m = 2, 3(mod 4) 
! if m = l(mod 4). 




if p \m and m is a square mod p 
if p jm and m is not a square mod p 
if p|m. 




= < 



1 

-1 




What we have shown so far is that if m = 2, 3(mod 4), then 




decomposed 



the rational prime p is < 



ramified 



inertial 



s It may be noted that the Legendre symbol can be effectively computed using its basic properties, viz., (^) — 
(f) (p)' (p) = (p) ^ a = ^(mod p), and the Gauss' Law of Quadratic Reciprocity which states that for any odd 

prime p, we have (^7-) = (— l)^ - , (j) = (— l) 2 " 5- , and last but not the least, (|) (^) = (— l) £ 2 _ ' i 2 _ , where g is 
any odd prime. 
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Now let's consider 

Case 2 : m = l(mod 4). 
In this case, O = TL 



and f(X) = X 2 — X — is the minimal polynomial of 

over Q. If p = 2, then f(X) has a root mod p iff = 0(mod 2), i.e., m = l(mod 8) [because 
x 2 — x = x(x — 1) = 0(mod 2) for any x € TL], and in this case, each of the two distinct elements 
in TL/2TL is a root of f(X), which implies that 2 is a decomposed prime. If p = 2 and m ^ l(mod 
8), then f(X) has to be irreducible in {TL/2TL)[X\, and so 2 is an inertial prime. Now assume that 
p 7^ 2. Then the "roots" 1=t=v ^" of X 2 — X — ^j^- will exist in TLjpTL if and only if y/m exists in 
TLjpTL, or equivalently, m is a square mod p. Moreover, f(X) has multiple roots in TLjpTL iff p\m. 
(Verify!) Thus, by Kummer's Theorem, we find that p is ramified iff p\m, and if p 7= 2 and pj(m, 
then p is decomposed or inertial according as m is or is not a square mod p. So if m = l(mod 4), 
then 

decomposed if p = 2 and m = l(mod 8) or if p / 2 and (j^j = 1 
p is <( ramified if p\m, i.e., = 

inertial if p = 2 and m ^ l(mod 8) or if p / 2 and = —1. 



Recall that the discriminant of the quadratic field K = Q(\/m) is given by 

d K = 



Am if m = 2, 3(mod 4) 
m if m = l(mod 4). 



Now the above observations concerning ramified primes in K can be expressed in a unified manner 
as follows. 

p is a ramified prime in K 44> p\d,K- 
This verifies the theorem of Dedekind, which was proved in §2.3. 

Exercise 2.6 (Fermat's Two Square Theorem): Show that the ring of integers of the quadratic field 
Q(i), where i 2 = —1, is the ring TL\i\. 9 Show that the decomposed primes are precisely the primes 
of the form 4k + 1. Use this and the fact that TL[i\ is a PID to show that any prime of the form 
4fc + 1 can be written as a sum of two squares. Further, use the fact that primes of the form 4k + 3 
are inertial in TL[i] to show that any positive integer n, with n = p^ 1 . . .p e £ where pi,---,Ph are 
distinct primes and e±, . . . , are positive integers, can be written as a sum of two squares if and 
only if ei is even whenever pi = 3 (mod 4). 

Example 2: Cyclotomic Fields 

Let p be an odd prime number and ( be a primitive p-th root of unity. Let O be the ring of 
integers of the cyclotomic field K = Q(C)- We have noted earlier that the prime p is totally ramified 
in K. In fact, we have (p)0 = P p_1 where P is the prime ideal of O generated by (£ — 1). We 
also know that dx = (—l)^~p p ~ 2 . Hence p is the only ramified prime. (This fact can also be seen 
from Kummer's Theorem which is applicable since O = TL[Q). Let q be a rational prime different 



9 Elements of 7L[i\ are often called the Gaussian integers. These were first studied by C. F. Gauss in his work on 
biquadratic reciprocity. 
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from p. Then qO is a product of g distinct prime ideals of O. Let Q be a prime ideal of O lying 
over q2L, and let / = [O/Q : W q ] = (jp — l)/g, where W q = TLjqTL. Then / (and hence g) can be 
determined as follows. If ( denotes the image of ( in the field O = O/Q, then we have O = IF 9 (£) 
and £ p = 1. Thus £ is a nonzero element of O* , which is a multiplicative group of order q* — 1. So 
it follows that p divides q* — 1, i.e., q* = l(mod p). Moreover, if for some I < f, q l = l(mod p), 
then ( would be in a field of q l elements and hence this field have to contain O = W q {Q, which is a 
contradiction. Therefore / is the least positive integer such that qf = l(mod p). In this way / and 
hence g is explicitly determined. The prime ideals lying above qTL can be determined by considering 
the factorization of X p — 1 in TLjqTL\X\ by using Kummer's Theorem. For example, if p = 7 and 
q = 5, then we find that / = 6 and g = 1; moreover, Q = (5, 1 + C + C 2 + C 3 + C 4 + C 5 + C 6 ) = (5) 
is the only prime ideal of O lying over 52Z. 

Exercise 2.7: Let p, ( and K be as above. Let H be the unique subgroup of index 2 in the cyclic 
group Gal(Q(£)/Q). The fixed field of H, say E, is a quadratic field. Show that E = Q(VP*) where 
p* = (—l) E 2~p. Let q be an odd prime different from p, f be as above, and let g = ^-f~- Show that 
q decomposes in E iff (^-^j = 1- Next, if q decomposes in E, then show that g is even and (j^J = 1. 

[You may use the elementary fact that (^j = aT^~ (mod p).] Conversely, if g is even, then show that 
the decomposition field of q contains E, and so q decomposes in E. Further, if g is odd, then use 
the minimality of / to show that (j^j = —1. Deduce from all this that (^j = (— 1) 2 2 . 
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